Director, Cyber Risk Mitigation (HKD$1.6M-HKD$2M)

We value expertise and leadership in cybersecurity, offering a dynamic environment where your contributions help shape the resilience and security of our operations. If you're passionate about making a significant impact in cybersecurity, we invite you to apply.

What you'll do:

• Develop and implement strategies to mitigate identified cyber risks, enhancing the security posture and compliance with industry standards.
• Implement comprehensive security measures and policies to protect information assets from unauthorized access and breaches while maintaining compliance with best practices.
• Continuously monitor and report the effectiveness of risk mitigation efforts to senior management, adapting to evolving threats and improving cyber resilience.
• Foster a culture of cybersecurity awareness among employees, reducing human error and enhancing vigilance.
• Facilitate cybersecurity audits and assessments with internal and external auditors, promptly addressing recommendations and demonstrating strong practices.
• Stay updated with emerging cybersecurity technologies and trends to adopt proactive defenses against potential threats.
• Evaluate emerging technologies and recommend strategic adoptions to enhance security infrastructure and operational efficiency.

What you'll bring:

• A degree, preferably a master’s, in Computer Science, IT, Cybersecurity, or related fields.
• Over 10 years in cybersecurity or IT risk management, with at least 5 years in a leadership role.
• Experience developing cyber risk strategies and implementing security frameworks aligned with enterprise risk management.
• Technical expertise in security controls, incident response, audits, and compliance with standards like NIST and ISO 27001.
• Certifications such as CISSP, CISM, or CRISC are desirable.
• Knowledge of security frameworks and ITGCs across infrastructure, cloud, and applications.
• Proficient in DevSecOps, cloud security, GDPR, and cybersecurity laws, with strong problem-solving skills and the ability to manage complex risks.
• Speaks fluent English, Cantonese and equips with strong communication skills